Eugene Aronne

It would also be better if the **path** fetcher followed the path relative to the remotely executed repository. Currently it always assumes the path is relative to the location from...

Case in point, found this problem in the field: Folks using the oracledb_session resource will find it works if using the Oracle 12 sqlplus binary, but not Oracle 19 sqlplus...

I haven't circled back to this since I first created #581 Had I known it would diverge from the attest subcommand I'd have weighed in sooner, sorry "utils" is too...

This is intended to emulate exactly the related controls from the DISA STIG itself. It is not a duplication. In this case, multiple CCI's support different aspects of AC-2(4), as...

Initial reaction from a sponsor: don't replace one problem with another, i.e., heimdall_tools and inspec_tools confused the community because they thought heimdall_tools = heimdall, and inspec_tools = inspec. If we...

Not sure how you're provisioning an InSpec runner, but please provide an option that doesn't assume docker is available, especially on Windows workstations.

1. All security test results generated from or through SAF tools provide a mapping to the relevant NIST SP 800-53 controls. 2. For InSpec profiles ("saf scan" - which points...

>But if there is any _other_ change in the description, delta will replace it with the raw STIG text and lose the variable.< Hence the reason for the issue. Ultimately...

On multiple-layer overlays, doesn't flag things overlaid controls such as the attached example. Look carefully at it in Heimdall's code tab. V-71933 is overlaid by the first layer overlay V-71943...

As of 5/4/2022, this isn't quite fixed. See attached [example-3-layer-overlay_03062022.json.txt](https://github.com/mitre/heimdall2/files/8626381/example-3-layer-overlay_03062022.json.txt) - V-71933 is overlayed by the "middle" or "first-layer" overlay profile named "example-inspec-overlay-profile-against-rhel7-stig-baseline-profile" - V-71935 is overlayed by the "top"...